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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1. (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the apparatus comprising a machine 
readable memory that provides instructions[[,]] for solving a system of linear equations 
Ax=b in n unknowns on a finite field GF(p), where p is a prime, « is a positive integer, A 
is a coefficient matrix consisting of elements of n rows and n columns, x is a vector of 
unknowns consisting of n elements, and Z> is a constant vector consisting of n elements, 
which when executed by a machine, cause said machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector 6, and triangular 
transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx=d 
in n unknowns that is equivalent to the system of linear equations Ax^b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax=b of the read coefficient matrix A and the read constant vector b\ 
and 

performing one of: secret communication by encryption and decryption; digital signature 
generation and verification; and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ 
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wherein the coefficient matrix A is triangular transformed into the coefficient matrix C of 
upper triangular form without a division on the finite field GF(p) being 
performed. 



2. (Previously Presented) The apparatus of Claim 1, wherein: 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d fi'om the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
fi"om the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multiplied by 
a nonzero coefficient chosen from the object equation, and values 
generated as a result of the multiplications are set into a second coefficient 
group, 
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(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 



3. (Cancelled) 

4. (Previously Presented) The apparatus of Claim 2, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mi (i=l,2, ...,n) 

and the inverses of the diagonal elements mi (i^lj, in the finite field GF(p) 
are denoted by// (i=U,. • calculating inverses of diagonal elements of the 
coefficient matrix C includes 

(a) computing values t and tt where 

n 

t- = Yl^^ (except nii) mod p (1=1,2,. . . ,n) 

k=\ 

and 

n 

t =Y\^k ^odp 

k=\ 

(b) computing u where 
u=l/t mod p 

and 

(c) computing values // where 
li-uxti mod p (i=l,2,...,n) 
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to find the inverses // (i~l,2, ...,n), 

5. (Previously Presented) The apparatus of Claim 4, 

wherein computing the values t and ti includes calculating 
S}=mjxm2 modp 
S2=Sjxm3 modp 
\ 

Sn.S=Sn^4Xmn-2modp 

in the stated order, then calculating 

tn-}=Sn-3Xmnmodp 
Sn-THn-lXmn ffiod p 
tn-2^Sn~4XSn ^od p 
Sn-}'^mn^2XSn mod p 
tn-3=Sn-5XSn-l mod p 
Sn-2=mn-SXSn-} mod p 
tn-4=Sn-6XSn.2 THod p 

S5-m4XS6 mod p 
t3=Sjxss mod p 
S4=m3XS3 mod p 
t2~mjxs4 mod p 
tj=m2XS4 mod p 
in the stated order, and lastly calculating 

ZOETEWD\IRV\380396.1A 5 



Appl. No. 09/603,636 

Amdt. dated April 4, 2005 

Reply to Office action of January 5, 2005 



Docket No. NAK1-BL53 (62478-1300) 



t=tjxmj 

for a value j chosen from a set of positive integers {l,2,...,n}, 

6. (Previously Presented) The apparatus of Claim 1 wherein: 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector b of the 
system of linear equations Ax=b includes one or more successive transformation 
processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
. transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 

in the coefficient group calculation process, 

(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 
or more object equations, a product is calculated for each of the pivotal 
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equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

(b) each of coefficients and a constant in the pivotal equation except a nonzero 
coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multipUed by a product in the first coefficient group 
calculated for the pivotal equation, and values generated as a result of the 
multiplications are set into a second coefficient group; and 

in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equation 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiplication on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 
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7. (Previously Presented) The apparatus of Claim 2, 

wherein when the diagonal elements of the coefficient matrix C are denoted by mi 

(i=l,2, ...,n) and the inverses of the diagonal elements mi (i=L2, .,.,n) in the finite 
field GF(p) are denoted by li (i=JJ, , calculating inverses of diagonal 
elements of the coefficient matrix C includes 

(a) a multiplying unit for computing values / and /, where 



(b) computing a value u where 
u=l/t modp 

and 

(c) computing values // where 
Ii=uxti mod p 0=1,2,. . .,n) 

to find the inverses // (i=l,2, ...,n). 



8. (Previously Presented) The apparatus of Claim 7, 

wherein computing values t and includes calculating 



n 




and 



n 




Sj=mjxm2 mod p 



S2-sjxm3 mod p 



Sn-3=Sn-4Xmn.2 mod p 



in the stated order, then calculating 
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tn=Sn-sxmn^} mod p 

tn-J =Sn-3 Xntn mod p 

Sn=mn.ixmn mod p 

tn-2-Sn-4XSn mod p 
Sn.l=mn-2XSn^odp 
tn-3^Sn-5XSn-l mod p 
Sn^2=mn-3XSn-I mod p 
tn-4=Sn-6XSn-2 mod p 

85=1714X86 mod p 
ts~sjxss modp 
84=1713X85 modp 
t2=mjxs4 modp 
tj=in2XS4 modp 
in the stated order, and lastly calculating 
t=tjxmj 

for a value j chosen from a set of positive integers {1,2, / 

9. (Previously Presented) An apparatus for computing an inverse / of an element y in 

GF(q) which is an extension field of a finite field GF(p), where j9 is a prime, and n 
is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial ofGF(q) whose root is cr, 
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equation solving means for finding solutions Xk (k=0, 1,2, n-l) of the system of linear 
equations Ax=b, the equation solving means including 

the apparatus of Claim 1; and 

inverse computing means for computing the inverse I, I=xo+xja-^ ... +Xri.}d^'\ using the 
root a and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means. 

10. (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the apparatus computing an inverse 
/ of an element y in GF(q) which is an extension field of a finite field GF(p), where is a 
prime, ^^p", and w is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is a, 

equation solving means for finding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 2; 
and 

inverse computing means for computing the inverse /, /=X(?+X7a+... +x„.y«'^"^, using the 
root a and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means ; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse 7 . 

1 1 . (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the apparatus computing an inverse 
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/of an element;; in GF(q) which is an extension field of a finite field GF(p), where /? is a 
prime, q=p^-, and « is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax^b in n unknowns, using the element j^' and all 
coefficients of a generator polynomial of GF(q) whose root is cc, 

equation solving means for finding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations y4x=6, the equation solving means including the apparatus of Claim 3; 
and 

inverse computing means for computing the inverse /, I^XQ-^xja^ ... -^Xn-ici'^ using the 
root a and the solutions Xk (k=0, 7, 2, n-1) found by the equation solving 
means : and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification: and data conversion including encoding and 
decoding of data, by using the computed inverse / . 

12. (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption: digital signature generation and verification: and data 
conversion including encoding and decoding of data, the apparatus computing an inverse 
/of an element;; in GF(q) which is an extension field of a finite field GF(p), where /? is a 
prime, q'^p^y and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions xjt (k~0, 1,2, n-1) of the system of linear 
equations Ax-b, the equation solving means including the apparatus of Claim 4; 
and 
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inverse computing means for computing the inverse /, /=xo+jcya+ ... -^Xn-ia"'\ using the 
root a and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means ; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification; and data conversion including encoding and 
decoding of data, by using the computed inverse L 

1 3 . (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the apparatus computing an inverse 
/ of an element y in GF(q) which is an extension field of a finite field GF(p), where j9 is a 
prime, q=p^, and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax'^b in n unknowns, using the element;; and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions Xk (k=0, 7, 2, n-1) of the system of linear 
equations ^==&, the equation solving means including the apparatus of Claim 5; 
and 

inverse computing means for computing the inverse /, /=xo+xya+ ... +Xn-ia^'\ using the 
root a and the solutions Xk (k^O, 7, 2, n-1) found by the equation solving 
means ; and 

means for performing one of: secret communication by encryption and decryption; digital 
signature generation and verification: and data conversion including encoding and 
decoding of data, by using the computed inverse / . 

14. (Currently Amended) An apparatus use in one of: secret communications by encryption 
and decryption; digital signature generation and verification; and data conversion 
including encoding and decoding of data, the apparatus for computing an inverse / of an 
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element in GF(q) which is an extension field of a finite field GF(p), where /? is a prime, 
q=p^^ and « is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax~b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is cr, 

equation solving means for finding solutions Xjt (k=0, 1,2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 6; 
and 

inverse computing means for computing the inverse /, I^xo+xja+.,, -^Xn-ja ' , usmg the 
root a and the solutions Xk (k=0, 7, 2, n-1) fouiid by the equation solving 
means : and 

means for performing one of: secret communication by encryption and decryption: digital 
signature generation and verification: and data conversion including encoding and 
decoding of data, by using the computed inverse / . 



15. (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption: digital signature generation and verification: and data 
conversion including encoding and decoding of data, the apparatus computing an inverse 
I of an element in GF(q) which is an extension field of a finite field GF(p), where j7 is a 
prime, q=p^ and n is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax'^b in n unknowns, using the element y and all 
coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions Xk (k=0, /, 2, n-1) of the system of linear 
equations Ax^b, the equation solving means including the apparatus of Claim 7; 
and 
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inverse computing means for computing the inverse /, /=xo+x/a+ ... 4-x„_7a"'^ using the 
root a and the solutions Xk (k=0, 1,2, n-1) found by the equation solving 
means ; and 

means for performing one of: secret communication by encryption and decryption: digital 
signature generation and verification: and data conversion including encoding and 
decoding of data, by using the computed inverse / . 



1 6. (Currently Amended) An apparatus for use in one of: secret communications by 
encryption and decryption: digital signature generation and verification: and data 
conversion including encoding and decoding of data, the apparatus computing an inverse 
/of an element in GF(q) which is an extension field of a finite field GF(p), where pis a 
prime, q^p"^, and « is a positive integer, the apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for fmding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 8; 
and 

inverse computing means for computing the inverse /, I=xo-^xja-^.,. ^-Xn-io!^'\ using the 
root a and the solutions Xk (k'^O, 1, 2, n-1) found by the equation solving 
means : and 

means for performing one of: secret communication by encryption and decryption: digital 
signature generation and verification: and data conversion including encoding and 
decoding of data, by using the computed inverse 7 . 

1 7. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element in GF(q) to decrypt the encrypted digital content recorded on 
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the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p^, n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is cr, 

equation solving means for finding solutions Xk (k^O, 1,2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 1; 
and 

inverse computing means for computing the inverse /, /=xo+xya+ ... +x„_ya " , using the 
root a and the solutions Xk (k=0, 1,2, n-1) found by the equation solving 
means : and 

means for using / to decrypt the encrypted digital content recorded on the record medium . 



1 8. (Currently Amended) A record medium reproducing apparatus for computing, when 

copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element j^; in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q^p^j is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is cr, 

equation solving means for finding solutions jcjt (k^O, 1, 2, n-1) of the system of linear 
equations Ax^b, the equation solving means including the apparatus of Claim 2; 
and 
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inverse computing means for computing the inverse /, /=xo+xya+ ... +Xn-]a ' , using the 
root a and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means ; and 

means for using / to decrypt the encrypted digital content recorded on the record medium . 

19. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;^ in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, v^here GF(q) is an extension field of a finite field GF(p),p is a prime, 
q^p^, is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax=b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is cr, 

equation solving means for finding solutions xjt (k=0, /, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 3; 
and 

inverse computing means for computing the inverse /, /=jco+X7a+ ... +Xn-j(x ' , using the 
root a and the solutions x^t (k=0, 1, 2, n-1) found by the equation solving 
means : and 

means for using / to decrypt the encrypted digital content recorded on the record medium . 

20. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;^ in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime. 
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q=p^, « is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax^b in n unknowns, using the element 3; and all 
coefficients of a generator polynomial of GF(q) whose root is cc, 

equation solving means for finding solutions Xk (k=0, 1,2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 4; 
and 

inverse computing means for computing the inverse /, /=xo+x/a+ ... ^Xn-i(i'\ using the 
root a and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means ; and 

means for using / to decrypt the encrypted digital content recorded on the record medium . 

2 1 . (Currently Amended) A record medium reproducing apparatus for computing, when 

copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;; in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a- prime, 
q=p'', w is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax^b in n unknowns, using the element;^ and all 
coefficients of a generator polynomial o{GF(q) whose root is or, 

equation solving means for finding solutions Xk (k=0, 7, 2, n-1) of the system of linear 
equations Ax^b, the equation solving means including the apparatus of Claim 5; 
and 
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inverse computing means for computing the inverse /, I=xo^X}a+... ^Xn-ja'''^ using the 
root a and the solutions Xk (k^O, 1, 2, n-l) found by the equation solving 
means : and 

means for using 7 to decrypt the encrypted digital content recorded on the record medium . 

22. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;; in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
9=p", n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax^b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is cr, 

equation solving means for finding solutions Xk (k=0, 7, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 6; 
and 

inverse computing means for computing the inverse /, I=xo^xia-^ ... ^Xn-ia " , using the 
root a and the solutions Xk (k=0, 1,2, n-1) found by the equation solving 
means ; and 

means for using / to decrypt the encrypted digital content recorded on the record medium . 

23. (Currently Amended) A record medium reproducing apparatus for computing, when 
copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;; in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
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q=p^, « is a positive integer, and G is a base point of the elliptic curve the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of Unear equations Ax^b in n unknowns, using the element j^; and all 
coefficients of a generator polynomial of GF(q) whose root is a; 

equation solving means for finding solutions Xk (k=0, 1, 2, n-1) of the system of linear 
equations Ax=b, the equation solving means including the apparatus of Claim 7; 
and 

inverse computing means for computing the inverse /, /=X(?+xya+ ... -^Xn.ja"'^, using the 
root a and the solutions Xk (k=0, 7, 2, n-I) found by the equation solving 
means : and 

means for using 7 to decrypt the encrypted digital content recorded on the record medium . 

24. (Currently Amended) A record medium reproducing apparatus for computing, when 

copyrighted digital content has been encrypted using a discrete logarithm problem on an 
elliptic curve E over GF(q) as a basis for security and recorded on a record medium, an 
inverse / of an element;; in GF(q) to decrypt the encrypted digital content recorded on 
the record medium, where GF(q) is an extension field of a finite field GF(p),p is a prime, 
q=p'^, n is a positive integer, and G is a base point of the elliptic curve E, the record 
medium reproducing apparatus comprising: 

equation generating means for generating a coefficient matrix A and a constant vector b 
for a system of linear equations Ax'^b in n unknowns, using the element and all 
coefficients of a generator polynomial of GF(q) whose root is or, 

equation solving means for finding solutions Xk (k^O, 7, 2, n-1) of the system of Unear 
equations Ax=b, the equation solving means including the apparatus of Claim 8; 
and 
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inverse computing means for computing the inverse /, /=;c^?+xya+ ... +Xn-ia^'\ using the 
root a and the solutions Xk (k=0, 1, 2, n-1) found by the equation solving 
means : and 

means for using / to decrypt the encrypted digital content recorded on the record medium . 

25. (Currently Amended) A machine based method fo r use in one of: secret communications 
by encryption and decryption; digital signature generation and verification; and data 
conversion including encoding and decoding of data, the method solving a system of 
linear equations Ax=b in n unknowns on a finite field GF(p) where /? is a prime, n is a 
positive integer, ^ is a coefficient matrix consisting of elements of n rows and n columns, 
X is a vector of unknowns consisting of n elements, and & is a constant vector consisting 
of n elements, the method comprising: 

utilizing a machine readable memory to provide instructions to a machine for execution 
by the machine, wherein 

the instructions, when executed by the machine, cause the machine to perform operations 
comprising: 

reading a stored coefficient matrix A and a stored constant vector b, and triangular 
transforming the read coefficient matrix A and constant vector b to generate a 
coefficient matrix C and a constant vector d for a system of linear equations Cx^d 
in n unknowns that is equivalent to the system of linear equations Ax=b, the 
coefficient matrix C consisting of elements of n rows and n columns and the 
constant vector d consisting of n elements; 

calculating inverses of diagonal elements of the generated coefficient matrix C on the 
finite field GF(p)\ and 

solving the system of linear equations Cx=d using the generated coefficient matrix C, the 
generated constant vector d, and the calculated inverses of the diagonal elements 
of the generated coefficient matrix C, to thereby solve the system of linear 
equations Ax=bi of the read coefficient matrix A and the read constant vector 6, 
and 
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performing one of: secret communication by encryption and decryption; digital signature 
generation and verification: and data conversion including encoding and decoding 
of data, by using the solution of the system of linear equations Ax=b\ 

wherein the coefficient matrix A is triangular transformed into the coefficient matrix C of 
upper triangular form without a division on the finite field GF(p) being 
performed. 

26. (Previously Presented) The method of Claim 25, wherein: generating the coefficient 
matrix C and the constant vector d of the system of linear equations Cx=d from the 
coefficient matrix A and the constant vector b of the system of linear equations Ax=b 
includes one or more successive transformation processes; 

the system of linear equations Ax=b is subjected to the first transformation process and 
the system of linear equations Cx=d is generated as a result of the last 
transformation process, 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformationin each transformation 
process, one pivotal equation which is a linear equation in n unknowns serving as 
a pivot for the transformation and one or more object equations which are linear 
equations in n unknowns to be transforrned are chosen fi*om the system of linear 
equations in n unknowns that is subjected to the transformation; 

each transformation process has a same number of transformation subprocesses as the 
one or more object equations, each for transforming a separate one of the one or 
more object equations into an equation equivalent to the object equation; and 

in each transformation subprocess, 

(a) each of the coefficients and a constant in the pivotal equation is multipUed by 
a nonzero coefficient chosen from the object equation, and values 



ZOETE WD\1RV\380396. 1 A 



21 



Appl. No. 09/603,636 Docket No. NAK1-BL53 (62478-1300) 

Amdt. dated April 4, 2005 

Reply to Office action of January 5, 2005 

generated as a result of the multiplications are set into a second coefficient 
group, 

(b) each of coefficients and a constant in the object equation is multiplied by a 

nonzero coefficient chosen from the pivotal equation, and values 
generated as a result of the multiplications are set into a first coefficient 
group, and 

(c) the values in the second coefficient group are subtracted respectively from the 

values in the first coefficient group, and differences generated as a result 
of the subtractions are respectively set as coefficients and a constant in the 
equation equivalent to the object equation. 

27. (Cancelled) 

28. (Previously Presented) The method of Claim 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by mi (i=lj, ,..,n) 

and the inverses of the diagonal elements mi (i=l,2, ,..,n) in the finite field GF(p) 
are denoted by/, (i=lj,. . . calculating the inverses of the diagonal elements 
of the coefficient matrix C includes 

(a) computing values t and tf where 

n 

and 

n 

k=l 

(b) computing value u where 
u-l/t modp 

and 

(c) computing values // where 
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Ii=^uxtimodp (i=],2,:..,n) 
to find the inverses If (i=l,2, .,.,n). 

29. (Previously Presented) The method of Claim 28, 

wherein the computing the values t and ti includes calculating 
Si=mjxm2 modp 
S2=S}xm3 mod p 
\ 

Sn.3=Sn-4Xmn-2 mod p 

in the stated order, then calculating 

tn~Sn-3Xmn-I mod p 
tn-l^Sn-S^n mod p 

Sn=mn~ixmn mod p 

tn^2=Sn-4XSn mod p 
Sn-l=mn.2XSn mod p 
tn^S^Sn-sXSn-l mod p 

Sn-2=rnn-3XSn-i mod p 

tn-4=Sn-6XSn.2 mod p 
\ 

85—1714X86 mod p 
(3-81X85 modp 
84-1713X85 modp 
t2=mjxs4 modp 
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tj=m2XS4 modp 
in the stated order, and lastly calculating 

t=tjxmj 

for a value j chosen from a set of positive integers {l,2,,,.,n}, 

30. (Previously Presented) The method ofClaim 25, wherein: 

generating the coefficient matrix C and the constant vector d of the system of linear 
equations Cx=d from the coefficient matrix A and the constant vector h of the 
system of linear equations Ax=h includes one or more successive transformation 
processes; 

the system of linear equations Ax^h is subjected to the first transformation process and 
the system of linear equations Cx=c/ is generated as a result of the last 
transformation process; 

in each transformation process, a coefficient matrix and a constant vector of a system of 
linear equations in n unknowns are transformed into a coefficient matrix and a 
constant vector of a system of linear equations in n unknowns that is equivalent to 
the system of linear equations before the transformation; 

in each transformation process, one pivotal equation which is a linear equation in n 
unknowns serving as a pivot for the transformation and one or more object 
equations which are linear equations in n unknowns to be transformed are chosen 
from the system of linear equations in n unknowns that is subjected to the 
transformation; 

each transformation process has a coefficient group calculation process and a same 

number of transformation subprocesses as the one or more object equations, the 
transformation subprocesses being performed following the coefficient group 
calculation process and being each for transforming a separate one of the one or 
more object equations; 

in the coefficient group calculation process, 
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(a) a nonzero coefficient is chosen from each of the pivotal equation and the one 
or more object equations, a product is calculated for each of the pivotal 
equation and the one or more object equations by multiplying together all 
chosen nonzero coefficients except a nonzero coefficient chosen from the 
equation, and products calculated respectively for the pivotal equation and 
the one or more object equations are set into a first coefficient group, and 

' (b) each of coefficients and a constant in the pivotal equation except a nonzero 
coefficient chosen from the pivotal equation in the coefficient group 
calculation process is multiplied by a product in the first coefficient group 
calculated for the pivotal equations, and values generated as a result of the 
multiplications are set into a second coefficient group; and 

in each transformation subprocess for transforming a separate one of the one or more 
object equations, 

(a) a nonzero coefficient chosen from the object equation in the coefficient group 

calculation process is changed to 0 as a new coefficient, 

(b) each of coefficients in the object equation except the nonzero coefficient 

chosen from the object equation is multiplied by a product in the first 
coefficient group calculated for the object equations, values in the second 
coefficient group calculated from the coefficients in the pivotal equations 
are subtracted respectively from values generated as a result of the 
multiplications on the coefficients in the object equation to generate 
differences, and the coefficients in the object equation are changed 
respectively to the differences as new coefficients, and 

(c) a constant in the object equation is multiplied by the product calculated for the 

object equations, a value in the second coefficient group calculated from 
the constant in the pivotal equation is subtracted from a value generated as 
a result of the multiphcation on the constant in the object equation to 
generate a difference, and the constant in the object equation is changed to 
the difference as a new constant. 
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3 1 . (Previously Presented) The method of Claim 26, wherein 

when the diagonal elements of the coefficient matrix C are denoted by m^ (i=l,2,..,,n) 

and the inverses of the diagonal elements m^ (i=l,2,,.,,n) in the finite field GF(p) 
are denoted by// (i=l,2,. . . ,n), calculating the inverses of the diagonal elements 
of the coefficient matrix C includes 

(a) computing values / and ti where 

n 

t- = Y\^k (^^^^P^ ^i) p (i=l,2,. . . ,n) 

k=\ 

and 

n 

t =f][wjt modp 

k=\ 

(b) computing a value u where 
u=I/t mod p 

and 

(c) computing values /, where 
li-uxti mod p (i=l,2,.,.,n) 

to find the inverses li (i=l,2,...,n), 

32. (Previously Presented) The method of Claim 3 1 , 
wherein computing values t and U involves calculating 

Sj'=mjxm2 mod p 
S2=sjxm3 mod p 
\ 

Sn-3=Sn-4>^n-2 mod p 
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in the stated order, then calculating 

tn-l^Sn-S^n^odp 

Sn=mn.ixmn mod p 

tn.2=Sn-4XSnmodp 
Sn-}=mn-2XSn mod p 
tn-S^Sn-SXSn-l mod p 
Sn^2=nin-3XSn-l mod p 
tn-4=Sn-6XSn-2 mod p 

! 

ss=m4XS6 mod p 
t3=sixss mod p 
S4—msxs5 mod p 
t2=m}XS4 modp 
t}=m2XS4 mod p 
in the stated order, and lastly calculating 
t=tjxmj 

for a value j chosen from a set of positive integers {l,2,...,n }. 
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